Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vXX8LyKOP5y46zgwa5SsNCMCu3o.roa
File: vXX8LyKOP5y46zgwa5SsNCMCu3o.roa (raw, json)
Hash identifier: sOD05Ak37Y679Zq4dH7zllZaKJRLYbS0mX+kG4Qk6X8=
Subject key identifier: BD:75:FC:2F:22:8E:3F:9C:B8:EB:38:30:6B:94:AC:34:23:02:BB:7A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vXX8LyKOP5y46zgwa5SsNCMCu3o.roa
Signing time: Sun 07 Feb 2021 11:56:37 +0000
ROA not before: Sun 07 Feb 2021 11:56:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5097 (0x13e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BD75FC2F228E3F9CB8EB38306B94AC342302BB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:e0:28:52:cd:af:f7:2f:92:9c:1f:2f:a6:
6f:00:86:32:1d:0a:48:6e:22:b0:d6:7e:02:46:81:
7a:94:1d:f9:04:05:8d:40:0c:c8:ee:72:76:d8:68:
7e:94:2b:02:dd:e4:08:74:d5:02:7d:9e:35:22:cb:
c0:fd:83:be:22:19:2d:b0:d2:e4:f5:8c:c3:d1:62:
4e:19:10:60:2f:ae:96:a5:af:a6:b0:ba:6a:af:21:
19:a7:8c:a0:0e:e6:8e:e4:21:90:22:d6:46:7e:8e:
6c:7a:f7:45:e5:02:45:34:35:77:01:8f:26:bb:ba:
13:f4:22:33:26:61:27:80:bf:49:92:ac:dd:5c:c0:
f0:b3:3c:e3:7a:94:8e:f6:30:21:9a:3c:3b:95:ba:
b9:70:aa:73:cf:88:51:53:2c:03:92:5e:d8:1d:d1:
62:4a:68:e8:72:13:18:2d:4d:2b:bc:32:88:33:cc:
fd:ec:66:95:ac:ab:27:b8:6c:8c:28:2e:09:f5:c0:
a1:2f:7b:b3:4d:30:33:cc:61:17:0f:90:a4:66:87:
e7:39:b4:43:3b:93:f5:98:c2:cb:af:64:ce:54:6c:
e6:9f:7b:93:e5:78:7a:f2:88:82:e6:36:73:9d:b0:
73:94:3a:62:45:ec:37:93:28:33:0f:eb:d0:01:ff:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:75:FC:2F:22:8E:3F:9C:B8:EB:38:30:6B:94:AC:34:23:02:BB:7A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vXX8LyKOP5y46zgwa5SsNCMCu3o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:3f:41:d8:f1:52:6f:7c:ff:c9:72:78:07:0d:6e:3f:29:a6:
c2:5d:b7:04:b9:6b:3a:47:35:cb:c8:f0:3a:85:09:e4:09:e2:
b6:13:3d:66:4a:3e:19:4a:64:42:b8:aa:e2:6d:67:01:17:c5:
8c:72:9f:11:bb:a8:ab:4d:4a:20:74:cd:64:d2:35:09:f4:fb:
d2:3d:ae:c5:c8:f1:ea:63:d6:c1:80:d7:75:f5:dd:5d:47:05:
71:8f:56:2e:60:35:75:e1:2a:21:05:97:f8:1b:c6:c0:ef:c3:
29:b6:f4:45:6e:9d:53:57:64:2e:f4:ad:59:be:cd:46:94:29:
72:19:8f:40:a5:31:a6:51:0d:02:7a:2d:35:bd:9f:cc:bb:f9:
e6:a4:12:93:2b:48:6c:90:42:87:dc:af:ec:e6:14:36:c6:6e:
27:ea:18:bc:c5:09:88:0a:92:1b:cd:8a:1d:6c:d4:d0:24:a5:
39:ea:9f:cc:63:44:03:18:a2:48:84:ec:ca:40:32:31:c9:dd:
f9:1d:ab:ad:8a:2d:9b:1b:0b:4a:0b:49:3d:ea:c8:ea:66:7e:
c4:52:73:80:4a:aa:76:16:2e:13:0f:01:f1:c2:cc:03:f3:da:
97:4c:46:ef:ff:80:50:20:af:17:59:67:1d:e7:5a:f7:5a:ee:
fa:c6:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org